103.1061.01 

22883 

PATENT TRADEMARK OFFICE 

This application is submitted in the name of the following inventors): 



3 Inventor 



Citizenship 



4 Srinivasan VISWANATHAN India 



5 Douglas P. DOUCETTE 



United States 



Residence City and State 
Fremont, California 
Freeland, Washington 



7 The assignee is Network Appliance, Inc., a California corporation having an 

8 office at 495 East Java Drive, Sunnyvale, CA 94089. 



Title of the Invention 



Flexible Disabling of Disk Sets 



ry 
% 

m 

16 



Incorporated Disclosure 



The invention described herein can be used in conjunction with the inven- 
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18 

19 Application Serial No. 08/071,643, filed in the name of David Hitz et al., 

20 titled "Write Anywhere File-System Layout," Express Mailing number RB962032214US, 

21 filed June 3, 1993, attorney docket number 103.1002.01. 
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1 Background of the Invention 

2 

3 L Field of the Invention 

4 

5 This invention relates to RAID subsystems. 

6 

7 2. Related Art 

8 

, 9 Redundant Array of Independent Disks (RAID) is a popular method for in- 

g& formation storage. RAID comes in several configurations that offer advantages over us- 

05 

,p ing a single storage device (such as faster data transfers and an error recovery methodol- 
ft ogy). 

flH At some point in the life of a RAID group there may be a desire to disable 

IS 

«jte one or more disks in the system. RAID systems often start quite small and grow into 

16 large complex systems. As a RAID system grows, the location of its component parts can 

17 become fragmented. Location fragmentation can make administration and maintenance 

18 of a system troublesome when, for example, each disk in a RAID group is located in a 

1 9 different rack or a different room. 

20 
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1 The obvious solution is to move all the components of a RAID group to one 

2 location, such as, a single rack. Generally, this requires taking the RAID or some portion 

3 of it off-line which is rarely an option. 

4 

5 A first known method that allows a disk to be disabled and then reactivated 

6 is often used to replace a damaged disk in a RAID group. This is often referred to as hot 

7 swapping or hot plugging. Although this method allows a disk to be inactivated and then 

8 reactivated, it suffers from a severe disadvantage. When the disk is reactivated, recon- 
•j struction of the RAID group data can take several hours, and if another disk in the group 
9$ fails during this time the entire volume may be lost. 

A second known method uses a change log to track any changes that take 

M = 

tp place relating to the inactivated disk in its absence. Although this method allows a disk to 

Hi 

% bee inactivated and reactivated, it too suffers from a severe disadvantage. Tracking all 

ill 

||5 the changes that need to be made to the inactivated disk is a very complex operation. The 

16 greater the duration between inactivation of a disk and its reactivation, the greater the 

17 likelihood that there will be more and more changes necessary. Thus, this technique has 

18 only limited value directed toward short term disabling of a disk in a RAID group. 

19 

20 Accordingly, it would be desirable to provide a technique for flexible dis- 

21 abling of disk sets that is not subject to the limitations of the known art. 

22 
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1 Summary of the Invention 

2 

3 The invention provides a method and system for flexible disabling of disk 

4 sets within a RAID group. In conjunction with the invention detailed in the incorporated 

5 disclosure (WAFL), the invention allows a disk to be disabled for long periods of time 

6 and then reactivated without incurring overhead (such as, required reconstruction of a 

7 RAID group). 

8 

0 Executing the following steps will allow a disk to be disabled. First, if 

b 

© WAFL is currently writing a consistency point, it should be allowed to complete the op- 

m 

il eration before continuing. Second, the disk to be inactivated is marked as "read-only " 

m At this point, the disk can be physically removed and the data that would come from the 

|J3 inactivated disk is reconstructed using the remaining disks (reconstruct on read). 

ru 

m 

\w 

|-ffc After a disk has been inactivated, writes continue to the RAID group using 

16 the remaining active disks in the group. Most file systems "write in place." This means 

17 that they overwrite old data with new data. WAFL always writes to unallocated file 

18 space. According to the invention, files that are edited during inactivation of a drive are 

19 written in their entirety to active disks, thus no data reconstruction is required when an 

20 inactivated disk is reactivated. 

21 
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1 Executing the following steps will allow a disk to be reactivated. First, the 

2 disk must be physically connected. Second, the disk is marked as "read/write." At this 

3 point, the disk is operating as it was prior to being disabled. 

4 

5 A parity disk may be disabled in a similar fashion, however, the entire 

6 RAID group must be disabled and a mirror RAID group should be used as the read 

7 source. A RAID group cannot provide data reliably when its parity disk is inactive. 

8 When the disabled parity disk is reactivated, it must be resynchronized with its mirror be- 
f 9 fore it is allowed to resume accepting requests for reading and writing data. 

fit 

41 Brief Description of the Drawings 

||3 Figure 1 shows a block diagram of a system for flexible disabling of disk 

| 

iU* sets. 

Ill 

ft 



16 Figure 2 shows a block diagram of data paths between components in a 

17 system for flexible disabling of disk sets. 

18 

19 Figure 3 illustrates a process flow diagram for disk disabling in a method 

20 for flexible disabling of disk sets. 

21 
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1 Figure 4 illustrates a process flow diagram for disk enabling in a method for 

2 flexible disabling of disk sets. 

3 

4 Detailed Description of the Preferred Embodiment 

5 

6 In the following description, a preferred embodiment of the invention is de- 

7 scribed with regard to preferred process steps and data structures. Those skilled in the art 

8 would recognize after perusal of this application that embodiments of the invention can 
kg be implemented using one or more general purpose processors or special purpose proces- 
S> sors or other circuits adapted to particular process steps and data structures described 
s; Et herein, and that implementation of the process steps and data structures described herein 
sM. would not require undue experimentation or further invention. 

m 

| *|4 Lexicography 

ro 5 

16 The following terms refer or relate to aspects of the invention as described 

17 below. The descriptions of general meanings of these terms are not intended to be limit- 

18 ing, only illustrative. 

19 

20 • RAID - in general, short for Redundant Array of Independent (or Inexpensive) Disks, 

21 a category of disk drives that employ two or more drives in combination for fault tol- 

22 erance and performance. 
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1 • Disk Mirroring - in general, a technique in which data is written to two duplicate 

2 disks simultaneously. When using two RAID groups, data written to the first RAID 

3 group is also written to the second RAID group. The second RAID group is said to be 

4 a "mirror" of the first RAID group. 

5 

6 As noted above, these descriptions of general meanings of these terms are 

7 not intended to be limiting, only illustrative. Other and further applications of the inven- 

8 tion, including extensions of these terms and concepts, would be clear to those of ordinary 
L j skill in the art after perusing this application. These other and further applications are 
B part of the scope and spirit of the invention, and would be clear to those of ordinary skill 

*fj in the art, without further invention or undue experimentation. 

0 

(3b System Elements 



Figure 1 shows a block diagram of a system for flexible disabling of disk 



16 sets. 

17 

18 A system 1 00 includes a filer 1 1 0, a RAID group 1 20, and a data link 130. 

19 

20 The filer 1 10 includes a processor, a main memory, and software for exe- 

21 cuting instructions (not shown, but understood by one skilled in the art). This software 

22 preferably includes software for managing a RAID storage system according to the in- 
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1 vention. Although the filer 110 and the RAID group 120 are shown as separate devices, 

2 there is no requirement that they be physically separate. 

3 

4 The RAID group 120 includes two or more data disks 129 and a parity disk 

5 125. For example but without limitation, figure 1 illustrates four data disks 129 labeled 

6 data disk a 1 2 1 , data disk b 1 22, data disk c 1 23, and data disk d 1 24. The parity disk 1 25 

7 includes parity information related to each RAID stripe (not shown, but understood by 

8 one skilled in the art). RAID level 4 is used in a preferred embodiment; however, there is 
, 9 no requirement that RAID level 4 be used, and other levels of RAID may also be used, 
fjj RAID level configurations are well-known in the art. 

4\ 

||| The RAID group 120 can include any one of a number of types of storage, 

lp including but not limited to, tape drives, hard disk drives, and optical drives. The RAID 

ru 

f%k group 120 may also use these types of drives in various combinations. 

in 

16 The data link 130 couples the filer 1 10 to the RAID group 120. 

17 

18 In a preferred embodiment, the data link 130 includes a direct wired con- 

19 nection. In alternative embodiments, the data link 130 may include alternative forms of 

20 communication, such as the Internet, an intranet, extranet, virtual private network, wire- 

21 less network, or some combination thereof. 

22 System Operation 
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1 Figure 2 shows a block diagram of data paths between components in a 

2 system for flexible disabling of disk sets. 

3 

4 A system 200 includes a file system 210, a RAID controller 220, and a set 

5 of off-line markers 230. 

6 

7 In a preferred embodiment, the file system 210 includes a WAFL file sys- 

8 tern as detailed in the incorporated disclosure. 



CO 



f!.j 



The RAID controller 220 preferably includes a device capable of routing 
data to and from the RAID group 120 in accordance to RAID level 4. 



m 

m The set of off-line markers 230 include a set of binary memory addresses. 



ft* Each one of the set of off-line markers 230 is individually associated with a disk in the 

iff 

jA- RAID group 120. A bit set for one of the set of off-line markers 230 indicates that the 

16 associated disk in the RAID group 120 is off-line. 

17 

18 Data disk b 122 and the parity disk 125 are used below to explain operation 

19 of the invention. This is intended to be exemplary and not limiting. The invention is ap- 

20 plicable to any disk or combination of disks in a RAID group 120. 

21 
22 
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Normal Operation 

Requests for data are sent by the file system 210 to the RAID controller 220 
which fetches the data from, or sends data to the RAID group. Responses to requests are 
sent back to the file system 210. 

Data Disk Disabling and Reactivation 

A data disk, such as data disk b 122, may be temporarily disabled. In a pre- 
ferred embodiment the file system 210 used is a file system 210 implementing WAFL. 
Upon being notified that data disk b 122 is to be taken off-line, WAFL ensures that if it is 
in the process of writing a consistency point, the consistency point is written before pro- 
ceeding. Data disk b 122 may now be marked as being off-line. The bit is set in the off- 
line marker 230 associated with data disk b 122. At this point the data disk b 122 may be 
physically disconnected from the system. 

When a data disk is marked as being off-line, the file system 210 recognizes 
the off-line disk as being read only. Thus, the file system 210 will not attempt to write 
any data to data disk b 122 since it is marked as off-line. The data for data disk b 122 is 
still available using a reconstruct on read technique, which is well-known in the art. 
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1 WAFL provides an important benefit over other file systems with regard to 

2 disk disabling. WAFL never overwrites existing data like other file systems that utilize 

3 "write in place." Thus, even when disks are reactivated, the file system 2 1 0 is guaranteed 

4 to be consistent. No catch-up time is needed such as would be required in systems that 

5 use "change logs" or reconstruct data on previously disabled disks using parity computa- 

6 tion. 

7 

8 The data disk b 122 is reactivated by first ensuring that it is physically con- 

L j nected to the RAID group 120, and second, that its bit in its associated off-line marker 
230 is cleared. Once this is accomplished, data disk b 122 has both read and write capa- 



■fi bility again, 

iff 

EBB Parity Disk Disabling and Reactivation 



]f5 The parity disk 125 may be temporarily disabled, however, when a parity 

16 disk 125 is disabled, the entire RAID group 120 must be taken off-line. This means that 

17 the RAID group 120 cannot be used even as a read only source for the data. Data may be 

18 read from a mirror of the off-line RAID group 120. 

19 

20 The parity disk 1 25 is reactivated by first ensuring that the parity disk 125 is 

21 physically connected to the RAID group 120. Second, the bit in its associated off-line 

22 marker 230 is cleared. This makes the parity disk 125 writeable as well as readable. 
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1 Third, the RAID group 120 must be synchronized with its mirror. Fourth, the RAID 

2 group 1 20 is reactivated and is now ready to accept requests. 

3 

4 Disk Disabling 

5 

6 Figure 3 illustrates a process flow diagram for disk disabling in a method 

7 for flexible disabling of disk sets, indicated by general reference character 300. The disk 

8 disabling process 300 initiates at a 'start' terminal 301 . 

5 The disk disabling process 300 continues to a 'notify file system' procedure 
4i 303 which notifies the file system 210 that a systems operator or the system itself would 

6 like to disable a disk in the RAID group 120. For example, a systems operator may want 
{(s to disable data disk b 122, and thus the file system 210 would be notified that a request 

B 

has been made to disable the disk. 

I 

16 An 'is CP in progress?' decision procedure 305 determines if the file system 

17 2 1 0 is currently creating a consistency point. If it is determined that the file system 2 1 0 is 

18 creating a consistency point, the disk disabling process 300 remains in the 'is CP in prog- 

19 ress' decision procedure 305, otherwise the disk disabling process 300 continues to an 'is 

20 disk a parity disk' decision procedure 307. 

21 
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1 The 'is disk a parity disk?' decision procedure 307 determines if the disk to 

2 be disabled is the parity disk 125. If it is determined that the disk to be disabled is the 

3 parity disk 125, the disk disabling process 300 continues to an 'inactivate RAID group' 

4 procedure 311. 

5 

6 A 'mark disk read-only' procedure 309 allows the disk to be marked as read 

7 only. This is accomplished by setting the bit for the associated off-line marker 230 for 

8 data disk b 122 (see figure 2 "marked as off-line). At this point the physical unit may be 

1 9 turned off and moved. Data that would be supplied by data disk b 122 if it were still ac- 

3> tive is still available by "reconstructing the data on read." That is, data from the remain- 
Hi 

Hh ing operational disks may be used to reconstruct data on the disabled data disk b 122. 

if 2 The disk disabling process 300 terminates through an 'end' terminal 313. 

cap 

ru 

j|4 An 'inactivate RAID group' procedure 311 allows the RAID group 120 to 

[fife be inactivated. The disk disabling process 300 terminates through the 'end' terminal 313. 

16 A RAID group 120 that has the parity disk 125 disabled cannot function. When the parity 

17 disk 125 is disabled, the file system 210 must look to a mirror of the disabled RAID 

18 group 120 for its data. 

19 
20 
21 
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Disk Enabling 

Prior to starting this process, the disk to be enabled must be physically con- 
nected to the RAID group 120. 

Figure 4 illustrates a process flow diagram for disk enabling in a method for 
flexible disabling of disk sets, indicated by general reference character 400. The disk 
enabling process 400 initiates at a 'start' terminal 401. 

The disk enabling process 400 continues to an 'is disk a parity disk?' deci- 
sion procedure 403 that determines whether the disk to be enabled is the parity disk 125. 
If it is determined that the disk to be enabled is the parity disk 125, then the disk enabling 
process 400 continues to a 'mark parity disk as read/write' procedure 407, otherwise the 
disk enabling process 400 continues to a 'mark data disk as read/write' procedure 405. 

The 'mark data disk as read/write' procedure 405 allows the data disk b 122 
to be marked as read/write. This is accomplished by clearing the bit for the off-line 
marker 230 associated with data disk b 122. At this point the data disk b 122 is fully op- 
erational as an integral part of the RAID group 120. The disk enabling process 400 ter- 
minates through an 'end' terminal 413. 
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1 The 'mark parity disk as read/write' procedure 407 allows the parity disk 

2 125 to be marked as read/write. This is accomplished by clearing the bit for the off-line 

3 marker 230 associated with parity disk 125. At this point the parity disk is only available 

4 to the file system 210. 

5 

6 A 'sync with mirror' procedure 409 allows the previously disabled RAID 

7 group 120 to synchronize with its mirror. No public access is allowed to the RAID group 

8 1 20 while synchronization is taking place. 



? 9 



ft 

{$3 



A 'reactivate RAID group' procedure 41 1 allows the RAID group 120 to be 
reactivated. The disk enabling process 400 terminates through the 'end' terminal 413. At 
this point the RAID group 120 is available to users of the system. 



J % Generality of the Invention 

35 



16 The invention has applicability and generality to other aspects of data stor- 

17 age on mass storage devices utilizing RAID including filers, caches, databases, and other 

1 8 memory storage systems. 



19 
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Alternative Embodiments 

Although preferred embodiments are disclosed herein, many variations are 
possible which remain within the concept, scope, and spirit of the invention, and these 
variations would become clear to those skilled in the art after perusal of this application. 
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